1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
<?php
/*
** Zabbix
** Copyright (C) 2001-2019 Zabbix SIA
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
**/
class CHtmlUrlValidator {
/**
* URL is validated if schema validation is enabled (see VALIDATE_URI_SCHEMES).
*
* Relative URL should start with .php file name.
* Absolute URL schema must match schemes mentioned in ZBX_URL_VALID_SCHEMES comma separated list.
*
* @static
*
* @param string $url URL string to validate.
* @param bool $allow_user_macro If set to be true, URLs containing user macros will be considered as valid.
* @param bool $validate_uri_schemes Parameter allows to overwrite global switch VALIDATE_URI_SCHEMES for
* specific uses.
*
* @return bool
*/
public static function validate($url, $allow_user_macro = true, $validate_uri_schemes = VALIDATE_URI_SCHEMES) {
if ($validate_uri_schemes === false) {
return true;
}
if ($allow_user_macro) {
$user_macro_parser = new CUserMacroParser();
$strlen = strlen($url);
for ($pos = 0; $pos < $strlen; $pos++) {
if ($user_macro_parser->parse($url, $pos) != CParser::PARSE_FAIL) {
return true;
}
}
}
$url = parse_url($url);
$allowed_schemes = explode(',', strtolower(ZBX_URI_VALID_SCHEMES));
return ($url && ((array_key_exists('scheme', $url) && in_array(strtolower($url['scheme']), $allowed_schemes))
|| (array_key_exists('path', $url) && preg_match('/^[a-z_\.]+\.php/i', $url['path']) == 1)
));
}
}
|
